L6 - Detecting and Preventing Threats

Question 1

What is penetration testing?

Answer 1

‘Pen’ testing is the practice of deliberately finding security holes in your own systems.

Question 2

What is modular testing?

Answer 2

A software system is broken down into separate modules.
Code reviews should be carried out on new systems.
Each module or part of the system needs to be separately tested for effective protection from security breaches.
Programmers need to be aware of the possible consequences of bad programming practices.

Question 3

What is plenary testing?

Answer 3

Penetration testing, ethical hacking and analysis tools such as audit trails can identify system vulnerabilities.
Software systems can be protected from cyber attacks using audit trails, code reviews and modular testing.

Question 4

Grey hat hackers:

Answer 4

Grey-hats fall somewhere in between black and white hats.

Grey hats will frequently seek out system vulnerabilities without authorisation from the system owners.